Reading Time: 18 minutesThis is Part 3, the final part on Azure Function and Intune Automation. In the series on automating Intune device group membership beyond what dynamic rules can express we covered the gap itself on Part 1, Part 2 covered the cloud-only Azure Function Intune automation architecture behind it. This post is the actual implementation: every…
Reading Time: 7 minutesThis is Part 2 in the series on automating Intune device group membership beyond what dynamic rules can express using an Azure Function and Graph API. In Part 1, we covered the gap itself; this post walks through the actual Azure Function Intune automation architecture behind it: a cloud-only design that runs entirely inside the…
Reading Time: 5 minutesEntra ID dynamic groups are powerful, but they can’t query everything – and this is the first post in a series showing how to automate Intune device management tasks that fall outside what dynamic membership rules can express, specifically adding and removing devices from Entra groups based on installed software and other conditions, built entirely…
Reading Time: 5 minutesYou’ve been there. You patched 40 CVEs across your fleet, went back to the dashboard, and the exposure score barely moved. You had to explain that to a manager and it wasn’t fun. That’s not just bad UX – it was a real modelling problem with how Microsoft calculated the score. And on May 31,…
Reading Time: 4 minutesDiscover an effective way to remove devices based on serial number from an Entra ID group. Managing device membership in Microsoft Entra ID groups is essential for maintaining security, ensuring compliance, and enforcing organizational policies at scale. Manually removing devices one by one is time-consuming and error-prone, especially when dealing with hundreds or thousands of…
Reading Time: 9 minutesModern device management in Microsoft Entra and Intune hinges on understanding where and how a device is registered or joined. The key states are: …and in Intune: Plus the critical distinction between corporate-owned and BYOD (personal) devices. Each state unlocks different management capabilities—from full policy application and remote wipe to app-only protection. Directory Join &…
Reading Time: 13 minutesLearn how to utilize sign-in audit Logs and Get-MgAuditLogSignIn to get information related to users, devices, sign-ins and many more. In today’s cloud-driven world, user sign-ins happen almost every second—across different devices, applications, and locations. Yet, for many IT teams, sign-in audit logs remain an underutilized resource, quietly capturing critical details about who’s accessing what,…
Reading Time: 4 minutesIn this post, we’ll walk through a PowerShell script that leverages Microsoft Graph and Get-MgUser cmdlet to retrieve essential user details, such as display name, email, job title, and more, directly from Entra ID. This simple yet powerful script can be a valuable tool for administrators looking to automate user information retrieval. Get-MgUser Cmdlet The…
Reading Time: 5 minutesThe “MG Cmdlets Cheat sheet” post serves as a vital resource for administrators aiming to harness the full potential of Microsoft Graph PowerShell cmdlets. While Microsoft’s official documentation offers excellent instructions on utilizing these cmdlets, it often falls short in revealing the complete array of fields returned upon execution. This gap can lead to missed…
Reading Time: 3 minutesIn this post we will discuss on how to import devices to an Entra ID group easily using PowerShell. Import Devices to an Entra ID Group Sometimes importing multiple members to Entra ID groups requires significant manual work like exporting CSVs, using templates, or clicking through the Azure portal for each device. A more efficient…
Reading Time: 5 minutesIn this post we will describe the concept of SSPR (self service password reset) and the way to implement it in Azure. What is SSPR? Many times helpdesk or administrators should perform a password reset for the end users either because they forgot their passwords or their account was locked out. Microsoft offers Self service…
Reading Time: 6 minutesIn this post we will discuss about Session policies and how we can build a mechanism using Microsoft Defender for Cloud apps to block specific actions such as copy, paste etc. Let’s start by first understand what it Defender for Cloud apps. As per Microsoft, Microsoft Defender for Cloud Apps is a Cloud Access Security…
Reading Time: 3 minutesThis is the first post of a security-centric series, that will try to demonstrate mechanisms and configurations in Azure and Intune, that help administrators secure their environments. In this post we will create a policy to block sign-in to specific application from unmanaged devices. We will create a conditional access policy in Microsoft Azure to…